Go Back   CodingForums.com > :: Server side development > PHP

Before you post, read our: Rules & Posting Guidelines

Reply
 
Thread Tools Rate Thread
Enjoy an ad free experience by logging in. Not a member yet? Register.
Old 12-28-2003, 07:46 AM   PM User | #1
alaios
Regular Coder

 
Join Date: Aug 2002
Posts: 433
Thanks: 3
Thanked 0 Times in 0 Posts
alaios is an unknown quantity at this point
1 profile n logins

Hi. Take a look at my problem. I have a log in menu that users use it in order to authenticate. If he is registered then i create a new session from him. The problem is that if another user tries to log in with the same user name, then it wil be logged in succesfully!!! I only want to log out the first user
alaios is offline   Reply With Quote
Old 12-28-2003, 08:27 AM   PM User | #2
V@no.
Regular Coder

 
Join Date: Feb 2003
Posts: 101
Thanks: 0
Thanked 0 Times in 0 Posts
V@no. is an unknown quantity at this point
as in your previous post, u probably will need store your user's sessions in the database or in the file.
ofcourse unless I'm missing some php features
V@no. is offline   Reply With Quote
Old 12-28-2003, 04:07 PM   PM User | #3
firepages
Super Moderator


 
Join Date: May 2002
Location: Perth Australia
Posts: 3,911
Thanks: 5
Thanked 80 Times in 79 Posts
firepages will become famous soon enough
I do not get it ? either you are allowing the same username to be used more than once or you are authenticating purely against a username ? both bad ideas
__________________
resistance is...

MVC is the current buzz in web application architectures. It comes from event-driven desktop application design and doesn't fit into web application design very well. But luckily nobody really knows what MVC means, so we can call our presentation layer separation mechanism MVC and move on. (Rasmus Lerdorf)
firepages is offline   Reply With Quote
Old 12-29-2003, 07:11 AM   PM User | #4
alaios
Regular Coder

 
Join Date: Aug 2002
Posts: 433
Thanks: 3
Thanked 0 Times in 0 Posts
alaios is an unknown quantity at this point
xm...ok

telle me about this "uthenticating purely against a username"
alaios is offline   Reply With Quote
Old 12-29-2003, 08:01 PM   PM User | #5
Celtboy
Regular Coder

 
Join Date: May 2002
Location: Virginia, USA
Posts: 620
Thanks: 0
Thanked 6 Times in 6 Posts
Celtboy is an unknown quantity at this point
in the username/password database, add a field called "logged_in."


When a user attempts to login:

if good username & good password:
Celtboy is offline   Reply With Quote
Old 12-29-2003, 09:59 PM   PM User | #6
me'
Senior Coder

 
Join Date: Nov 2002
Location: Warwickshire, England
Posts: 1,229
Thanks: 0
Thanked 0 Times in 0 Posts
me' is an unknown quantity at this point
Re: xm...ok

Quote:
Originally posted by alaios
telle me about this "uthenticating purely against a username"
just requiring a valid username to login, no password. Extremely unsecure.
__________________
David House - Perfect is achieved, not when there is nothing left to add, but when there is nothing left to take away. (Antoine de St. Exupery).
W3Schools | XHTML Validator | CSS Validator | Colours | Typography | HTML&CSS FAQ | Go get Mozilla Now | I blog!
me' is offline   Reply With Quote
Old 12-29-2003, 10:16 PM   PM User | #7
missing-score
Senior Coder


 
missing-score's Avatar
 
Join Date: Jan 2003
Location: UK
Posts: 2,194
Thanks: 0
Thanked 0 Times in 0 Posts
missing-score is on a distinguished road
Quote:
Originally posted by Celtboy
in the username/password database, add a field called "logged_in."


When a user attempts to login:

if good username & good password:
The logged_in field is ok, but what happens if the user suddenly shuts down their browser. Next time they come back they would still be logged in in the db, and then not be able to login?
missing-score is offline   Reply With Quote
Old 12-30-2003, 11:26 PM   PM User | #8
dniwebdesign
Regular Coder

 
dniwebdesign's Avatar
 
Join Date: Dec 2003
Location: Carrot River, Saskatchewan
Posts: 838
Thanks: 15
Thanked 9 Times in 9 Posts
dniwebdesign is an unknown quantity at this point
You could set it up so a small window pops up (using the same sessions on all the pages) which could reset the database value.
__________________
Dawson Irvine
CEO - DNI Web Design
http://www.dniwebdesign.com
dniwebdesign is offline   Reply With Quote
Old 12-30-2003, 11:39 PM   PM User | #9
missing-score
Senior Coder


 
missing-score's Avatar
 
Join Date: Jan 2003
Location: UK
Posts: 2,194
Thanks: 0
Thanked 0 Times in 0 Posts
missing-score is on a distinguished road
thats ok unless they have popups/javascript disabled.
missing-score is offline   Reply With Quote
Old 01-03-2004, 08:39 PM   PM User | #10
alaios
Regular Coder

 
Join Date: Aug 2002
Posts: 433
Thanks: 3
Thanked 0 Times in 0 Posts
alaios is an unknown quantity at this point
xm...

You could set it up so a small window pops up (using the same sessions on all the pages) which could reset the database value.


can u explain that? What the pop up window will provide?
alaios is offline   Reply With Quote
Reply

Bookmarks

Jump To Top of Thread


Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +1. The time now is 10:47 PM.


Advertisement
Log in to turn off these ads.